This is basically impossible.
First you must prove the leak came from the party you are suing, most Westerners had their data leaked by over 10 organisations at this point - equifax, high profile hacks, etc.
Secondly you need to prove damages. That is extremely difficult because no-one will ever admit in court to using leaked data against you.
So the solution you are proposimg is unworcable. We know, becauae we tested it - equifax leaked data for hundred million people, and so far noone was able to prove the damage.
Which leads me to believe there hasn’t been any damage worth pursuing. It’s a simpler hypothesis than there being rampant, apparently undetectable fraud.
Undetectable? I know 7 people that were targeted and defrauded, and unless you live under a rock, you probably know someone too.
I get 2 scam robocalls a week, 5 scam emails a week, where do you think all of them are getting my nyumber, name and address?
Now, how do I prove where these fraudsters get their data so that I cna file a lawsuit?
Then the parties injured can bring claims with the actual damages in hand. If the courts get clogged with such cases, we’ll have the evidence with which to legislate.
Jumping the shark by assuming hypothetical harms are real is how we supercharge needless bureaucracy.